← All credits

This issue was discovered by Sandipan Roy (Red Hat).

4 vulnerability records and advisories credit this contributor.

Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

Org.jolokia/jolokia-core: incomplete jndi denylist in jolokia jsr-160 proxy (bypass of cve-2018-1000130 fix)